CVE-2017-5165 An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. There is no CSRF Token generated per page and/or per (sensitive) function. Successful exploitation of this vul...
HighCVSS 7.6
EPSS 0.66%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. There is no CSRF Token generated per page and/or per (sensitive) function. Successful exploitation of this vulnerability can allow silent execution of unauthorized actions on the device such as configuration parameter changes, and saving modified configuration.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| binom3 universal multifunctional electric power quality meter firmware | All versions | No fix listed |
References
- 93028 third-party-advisory vdb-entry
- ics-cert.us-cert.gov third-party-advisory us-government-resource